Xoxa?

We're getting referrer spam for xoxa1.com, xoxa2.com, xoxa3.com, xoxa4.com, and xoxa5.com - but none of those domains are currently registered or resolve.

This is not the first time spammers are doing this. I guess we have to wait and see if those become active soon.

The spam itself is coming in through 211.117.169.172 (Hanaro Telecom, South Korea) and 219.93.174.105 (TMNET, Malaysia), both of which have been used by the recent drugs and pills spam and are supposedly open proxies.